TLS: use Server Name Indication

This allows sites that require a hostname to work correctly.
kruton · Jan 6, 2024 · 1e8ac0b · 1e8ac0b
1 parent 9d18c6b
commit 1e8ac0b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/socket.c b/src/socket.c
@@ -1961,7 +1961,12 @@ static int establish(Sock *sock)
 #if HAVE_SSL
     if (xsock->ssl) {
 	int sslret;
-	sslret = SSL_connect(xsock->ssl);
+	if (xsock->host != NULL)
+	    sslret = SSL_set_tlsext_host_name(xsock->ssl, xsock->host);
+
+	if (sslret == 1)
+	    sslret = SSL_connect(xsock->ssl);
+
 	if (sslret <= 0) {
 	    setupnextconn(xsock);
 	    ssl_io_err(xsock, sslret, xsock->addr ? H_ICONFAIL : H_CONFAIL);